Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: k4qPK9xnApQfUBK0b103gJAEY6E4r47tp+YZSN7QbqM=
Subject key identifier: BE:D6:8E:EE:E5:74:7F:B6:15:06:56:12:43:DF:DA:F7:DA:4B:A3:4A
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 0196C0B89202B8235623E7BBB3FC3375FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 03B9
Signing time: Sun 11 May 2025 19:00:43 +0000
Manifest this update: Sun 11 May 2025 19:00:43 +0000
Manifest next update: Mon 12 May 2025 19:00:43 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: xYxZabtkRYcaGTJonSRWCMOsYEXma+IW19AL7USJrMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:92:02:b8:23:56:23:e7:bb:b3:fc:33:75:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: May 11 19:00:43 2025 GMT
Not After : May 12 19:00:43 2025 GMT
Subject: CN=bed68eeee5747fb61506561243dfdaf7da4ba34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:b5:8c:00:ad:97:19:28:9d:14:48:8a:10:
13:47:37:34:74:46:c8:65:58:71:73:35:31:3a:6d:
72:9f:0f:d8:2e:d8:39:0e:a8:a2:27:76:8e:a7:33:
1e:b0:7d:4d:c4:fb:d1:4d:eb:a4:a4:c8:89:dc:e3:
c1:97:5c:0d:0c:cd:fe:92:f5:c7:95:f9:21:03:4a:
f8:60:3b:45:a8:de:68:c8:36:f0:51:d8:46:5f:4b:
69:bb:74:5f:d7:5c:32:c2:a3:80:b0:cb:ac:46:ad:
6d:ba:51:32:19:77:f3:72:57:06:ef:64:74:c0:f1:
0d:2f:1b:00:e1:ce:17:77:b7:bb:a1:79:47:3e:42:
51:28:a5:12:dd:92:a4:e2:e2:4f:7f:09:f4:26:41:
07:a8:41:b0:1a:9a:5e:e3:92:d5:6d:24:36:ad:89:
d3:d6:5f:e6:f1:10:2c:d6:b3:a5:7f:0f:a0:3e:27:
95:1d:33:da:6f:e1:3b:6f:bf:a6:06:4b:83:b9:b5:
e1:f8:98:c2:16:a8:3d:5c:25:6b:04:90:77:73:78:
3e:f4:c2:18:20:ee:e4:6e:36:50:d3:81:b4:a5:58:
26:88:92:6f:c4:aa:4f:44:2a:61:ac:71:e9:58:c8:
f9:b4:56:81:30:df:26:3a:b3:9c:10:93:6d:8e:c2:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D6:8E:EE:E5:74:7F:B6:15:06:56:12:43:DF:DA:F7:DA:4B:A3:4A
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:96:f6:ea:c7:09:75:7c:b8:f2:43:43:6d:30:d0:4c:7a:ab:
ce:07:b2:1b:8e:0d:87:a5:38:71:0a:29:ff:15:b0:3c:35:5d:
3f:98:92:02:b8:5a:f2:bb:1d:75:75:6b:a7:4d:62:84:18:bd:
86:a1:0b:94:ef:61:d4:8a:18:64:1a:34:ed:6e:5f:99:23:07:
d1:a4:29:cb:66:77:9e:9b:ed:38:29:a0:05:4a:88:3a:a9:54:
fe:4c:bb:19:79:67:e7:00:e4:1a:65:f1:15:87:91:4e:7e:59:
5d:7c:b0:47:69:61:e5:c5:34:a3:c9:5b:b6:29:38:0f:25:be:
b7:9e:73:22:26:68:49:23:19:c3:dd:70:cb:c8:5a:cf:5d:0e:
18:ca:5d:2d:88:f0:02:c3:2a:3a:fc:96:17:aa:9a:c2:c7:b6:
6b:ea:29:3b:f7:33:76:b5:e4:1d:e6:4c:56:6f:4c:d0:8c:3f:
1d:85:2e:7c:68:97:43:7e:c6:a5:2d:a7:36:73:6e:cb:9a:94:
ae:d8:ac:7b:11:41:ef:1a:12:fa:59:d9:51:93:0a:ef:93:6f:
55:d0:9f:69:06:f8:e4:dc:ae:c1:5c:2b:6e:1e:cd:9f:15:a6:
21:53:a1:24:d8:86:dd:f0:f9:1c:c0:fe:fe:64:27:07:69:07:
53:63:94:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:34:00 2025 by rpki-client